@0xrama/bnpm 0.0.1

package/dist/src/commands/token.js

@@ -0,0 +1,47 @@
+import npa from "npm-package-arg";
+import { RegistryError } from "../registry/client.js";
+function packageName(value) {
+    let parsed;
+    try {
+        parsed = npa(value);
+    }
+    catch {
+        throw new RegistryError(`Invalid token package ${value}`);
+    }
+    if (!parsed.name || parsed.rawSpec !== "*" || parsed.type !== "range")
+        throw new RegistryError(`Token package must be an exact package name: ${value}`);
+    return parsed.name;
+}
+function ipv4Cidr(value) {
+    const match = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})\/(\d{1,2})$/.exec(value);
+    if (!match || match.slice(1, 5).some((part) => Number(part) > 255) || Number(match[5]) > 32)
+        throw new RegistryError(`Invalid IPv4 CIDR ${value}`);
+    return value;
+}
+export function tokenCreationBody(options) {
+    if (options.tokenName !== undefined && (!options.tokenName.trim() || options.tokenName.length > 128))
+        throw new RegistryError("Token name must contain 1-128 characters");
+    if (options.tokenDescription !== undefined && options.tokenDescription.length > 1024)
+        throw new RegistryError("Token description exceeds 1024 characters");
+    const scopes = (options.tokenScopes ?? []).map((value) => value.replace(/^@/, ""));
+    const organizations = options.tokenOrganizations ?? [];
+    if (scopes.some((value) => !/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(value)))
+        throw new RegistryError("Token scopes must be exact scope names");
+    if (organizations.some((value) => !/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(value)))
+        throw new RegistryError("Token organizations must be exact organization names");
+    return {
+        ...(options.tokenName === undefined ? {} : { name: options.tokenName }),
+        ...(options.tokenDescription === undefined ? {} : { description: options.tokenDescription }),
+        ...(options.tokenExpires === undefined ? {} : { expires: options.tokenExpires }),
+        ...(options.tokenPackages === undefined ? {} : { packages: options.tokenPackages.map(packageName) }),
+        ...(options.tokenPackagesAll ? { packages_all: true } : {}),
+        ...(scopes.length === 0 ? {} : { scopes }),
+        ...(organizations.length === 0 ? {} : { orgs: organizations }),
+        ...(options.tokenPackagesPermission === undefined ? {} : { packages_and_scopes_permission: options.tokenPackagesPermission }),
+        ...(options.tokenOrganizationsPermission === undefined ? {} : { orgs_permission: options.tokenOrganizationsPermission }),
+        ...(options.tokenCidrs === undefined ? {} : { cidr_whitelist: options.tokenCidrs.map(ipv4Cidr) }),
+        ...(options.tokenBypass2fa ? { bypass_2fa: true } : {}),
+        ...(options.tokenReadOnly ? { readonly: true } : {}),
+    };
+}
+//# sourceMappingURL=token.js.map

package/dist/src/commands/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../src/commands/token.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,iBAAiB,CAAC;AAElC,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEtD,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IACjG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,aAAa,CAAC,gDAAgD,KAAK,EAAE,CAAC,CAAC;IACxJ,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,KAAK,GAAG,yDAAyD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,KAAK,EAAE,CAAC,CAAC;IACnJ,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAuB;IACvD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,0CAA0C,CAAC,CAAC;IAC1K,IAAI,OAAO,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,CAAC,gBAAgB,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,2CAA2C,CAAC,CAAC;IAC3J,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACnF,MAAM,aAAa,GAAG,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,wCAAwC,CAAC,CAAC;IAC3I,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,sDAAsD,CAAC,CAAC;IAChK,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC5F,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;QAChF,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACpG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1C,GAAG,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QAC9D,GAAG,CAAC,OAAO,CAAC,uBAAuB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,8BAA8B,EAAE,OAAO,CAAC,uBAAuB,EAAE,CAAC;QAC7H,GAAG,CAAC,OAAO,CAAC,4BAA4B,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,4BAA4B,EAAE,CAAC;QACxH,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACJ,CAAC"}

package/dist/src/commands/trust.d.ts

@@ -0,0 +1,5 @@
+import type { CommandOptions } from "../core/cli-parser.js";
+export declare class TrustError extends Error {
+    constructor(message: string);
+}
+export declare function trustConfiguration(provider: "github" | "gitlab" | "circleci", options: CommandOptions): Readonly<Record<string, unknown>>;

package/dist/src/commands/trust.js

@@ -0,0 +1,41 @@
+import { basename } from "node:path";
+export class TrustError extends Error {
+    constructor(message) { super(message); this.name = "TrustError"; }
+}
+const uuid = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+function yamlFile(value, provider) {
+    if (!value || basename(value) !== value || !/\.ya?ml$/i.test(value))
+        throw new TrustError(`${provider} trust requires a basename-only YAML file`);
+    return value;
+}
+function entity(value, provider) {
+    const parts = value?.split("/") ?? [];
+    if ((provider === "github" && parts.length !== 2) || (provider === "gitlab" && parts.length < 2) || parts.some((part) => !/^[A-Za-z0-9._-]+$/.test(part))) {
+        throw new TrustError(`${provider} trust requires ${provider === "github" ? "owner/repository" : "group/project"}`);
+    }
+    return parts.join("/");
+}
+function requiredUuid(value, field) {
+    if (!value || !uuid.test(value))
+        throw new TrustError(`${field} must be a UUID`);
+    return value;
+}
+export function trustConfiguration(provider, options) {
+    const permissions = [...(options.allowPublish ? ["createPackage"] : []), ...(options.allowStagePublish ? ["createStagedPackage"] : [])];
+    if (permissions.length === 0)
+        throw new TrustError("At least one trusted-publisher permission is required");
+    if (provider === "github") {
+        return { type: provider, claims: { repository: entity(options.trustRepository, provider), workflow_ref: { file: yamlFile(options.trustFile, provider) }, ...(options.trustEnvironment === undefined ? {} : { environment: options.trustEnvironment }) }, permissions };
+    }
+    if (provider === "gitlab") {
+        return { type: provider, claims: { project_path: entity(options.trustProject ?? options.trustRepository, provider), ci_config_ref_uri: { file: yamlFile(options.trustFile, provider) }, ...(options.trustEnvironment === undefined ? {} : { environment: options.trustEnvironment }) }, permissions };
+    }
+    const vcsOrigin = options.trustVcsOrigin;
+    if (!vcsOrigin || vcsOrigin.includes("://") || vcsOrigin.split("/").length < 3 || !/^[A-Za-z0-9._-]+(?:\/[A-Za-z0-9._-]+){2,}$/.test(vcsOrigin))
+        throw new TrustError("CircleCI vcs-origin must use provider/owner/repository without a URL scheme");
+    const contexts = options.trustContextIds ?? [];
+    if (contexts.some((value) => !uuid.test(value)))
+        throw new TrustError("CircleCI context-id must be a UUID");
+    return { type: provider, claims: { "oidc.circleci.com/org-id": requiredUuid(options.trustOrganizationId, "org-id"), "oidc.circleci.com/project-id": requiredUuid(options.trustProjectId, "project-id"), "oidc.circleci.com/pipeline-definition-id": requiredUuid(options.trustPipelineDefinitionId, "pipeline-definition-id"), "oidc.circleci.com/vcs-origin": vcsOrigin, ...(contexts.length === 0 ? {} : { "oidc.circleci.com/context-ids": contexts }) }, permissions };
+}
+//# sourceMappingURL=trust.js.map

package/dist/src/commands/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../../../src/commands/trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAGrC,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAe,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC;CAC3E;AAED,MAAM,IAAI,GAAG,4EAA4E,CAAC;AAE1F,SAAS,QAAQ,CAAC,KAAyB,EAAE,QAAgB;IAC3D,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,QAAQ,2CAA2C,CAAC,CAAC;IAClJ,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAyB,EAAE,QAA6B;IACtE,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1J,MAAM,IAAI,UAAU,CAAC,GAAG,QAAQ,mBAAmB,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,KAAa;IAC5D,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;IACjF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAA0C,EAAE,OAAuB;IACpG,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxI,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,uDAAuD,CAAC,CAAC;IAC5G,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC;IACzQ,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC;IACxS,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,CAAC;IACzC,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,6EAA6E,CAAC,CAAC;IACrP,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC;IAC/C,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;IAC5G,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,0BAA0B,EAAE,YAAY,CAAC,OAAO,CAAC,mBAAmB,EAAE,QAAQ,CAAC,EAAE,8BAA8B,EAAE,YAAY,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,EAAE,0CAA0C,EAAE,YAAY,CAAC,OAAO,CAAC,yBAAyB,EAAE,wBAAwB,CAAC,EAAE,8BAA8B,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,+BAA+B,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC;AAC7c,CAAC"}

package/dist/src/config/commands.d.ts

@@ -0,0 +1,5 @@
+import type { BnpmPaths } from "./paths.js";
+export type WritableConfigKey = "registry" | "recentReleaseHours";
+export declare function getConfig(paths: BnpmPaths, rawKey: string): Promise<string | number>;
+export declare function listConfig(paths: BnpmPaths): Promise<Readonly<Record<WritableConfigKey, string | number>>>;
+export declare function mutateConfig(paths: BnpmPaths, action: "set" | "delete", rawKey: string, value?: string): Promise<void>;

package/dist/src/config/commands.js

@@ -0,0 +1,91 @@
+import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { randomBytes } from "node:crypto";
+import YAML from "yaml";
+import { ConfigError, loadConfigFile, parseConfig } from "./configuration.js";
+import { defaultConfig, recentReleaseHours } from "./types.js";
+import { loadRegistryConfiguration } from "../registry/configuration.js";
+function key(value) {
+    if (value !== "registry" && value !== "recentReleaseHours")
+        throw new ConfigError(`unsupported writable key ${value}`);
+    return value;
+}
+async function optional(path) {
+    try {
+        return await readFile(path, "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return "";
+        throw error;
+    }
+}
+async function atomic(path, bytes) {
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    const temporary = join(dirname(path), `.${process.pid}.${randomBytes(8).toString("hex")}.tmp`);
+    try {
+        await writeFile(temporary, bytes, { flag: "wx", mode: 0o600 });
+        await chmod(temporary, 0o600);
+        await rename(temporary, path);
+        await chmod(path, 0o600);
+    }
+    catch (error) {
+        await rm(temporary, { force: true });
+        throw error;
+    }
+}
+function validRegistry(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new ConfigError("registry must be an absolute HTTPS URL");
+    }
+    if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash)
+        throw new ConfigError("registry must use HTTPS without credentials, query, or fragment");
+    if (!url.pathname.endsWith("/"))
+        url.pathname += "/";
+    return url.href;
+}
+async function setRegistry(path, value) {
+    const lines = (await optional(path)).split(/\r?\n/).filter((line) => !/^\s*registry\s*=/.test(line));
+    while (lines.at(-1) === "")
+        lines.pop();
+    if (value !== undefined)
+        lines.push(`registry=${validRegistry(value)}`);
+    await atomic(path, lines.length === 0 ? "" : `${lines.join("\n")}\n`);
+}
+async function setRecency(path, value) {
+    const current = await loadConfigFile(path) ?? {};
+    let hours;
+    if (value !== undefined) {
+        const number = Number(value);
+        if (!recentReleaseHours.includes(number))
+            throw new ConfigError("recentReleaseHours must be one of 1, 6, 24");
+        hours = number;
+    }
+    const next = { ...(hours === undefined ? {} : { recentReleaseHours: hours }), ...(current.trustedPackages === undefined ? {} : { trustedPackages: current.trustedPackages }) };
+    const bytes = Object.keys(next).length === 0 ? "" : YAML.stringify(next, { sortMapEntries: true });
+    parseConfig(bytes, path);
+    await atomic(path, bytes);
+}
+export async function getConfig(paths, rawKey) {
+    const selected = key(rawKey);
+    if (selected === "registry")
+        return (await loadRegistryConfiguration({ userNpmrc: paths.userNpmrc, projectNpmrc: paths.projectNpmrc })).defaultRegistry.href;
+    return (await loadConfigFile(paths.globalConfig))?.recentReleaseHours ?? defaultConfig.recentReleaseHours;
+}
+export async function listConfig(paths) {
+    return { registry: await getConfig(paths, "registry"), recentReleaseHours: await getConfig(paths, "recentReleaseHours") };
+}
+export async function mutateConfig(paths, action, rawKey, value) {
+    const selected = key(rawKey);
+    if (action === "set" && value === undefined)
+        throw new ConfigError(`config set ${selected} requires a value`);
+    if (selected === "registry")
+        await setRegistry(paths.userNpmrc, action === "set" ? value : undefined);
+    else
+        await setRecency(paths.globalConfig, action === "set" ? value : undefined);
+}
+//# sourceMappingURL=commands.js.map

package/dist/src/config/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../../src/config/commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAoB,MAAM,oBAAoB,CAAC;AAChG,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAA2B,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAIzE,SAAS,GAAG,CAAC,KAAa;IACxB,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,oBAAoB;QAAE,MAAM,IAAI,WAAW,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC;IACvH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,IAAI,CAAC;QAAC,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AAChJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,KAAa;IAC/C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/F,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,WAAW,CAAC,wCAAwC,CAAC,CAAC;IAAC,CAAC;IACxG,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,WAAW,CAAC,iEAAiE,CAAC,CAAC;IAClL,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC;IACrD,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,KAAc;IACrD,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACrG,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACxC,IAAI,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,KAAc;IACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,KAAqC,CAAC;IAC1C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAA4B,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,4CAA4C,CAAC,CAAC;QACpI,KAAK,GAAG,MAA4B,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,GAAgB,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC,EAAE,CAAC;IAC5L,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACnG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACzB,MAAM,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAgB,EAAE,MAAc;IAC9D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,CAAC,MAAM,yBAAyB,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC;IAC7J,OAAO,CAAC,MAAM,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,kBAAkB,IAAI,aAAa,CAAC,kBAAkB,CAAC;AAC5G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAgB;IAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC,KAAK,EAAE,oBAAoB,CAAC,EAAE,CAAC;AAC5H,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAAgB,EAAE,MAAwB,EAAE,MAAc,EAAE,KAAc;IAC3G,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,KAAK,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,cAAc,QAAQ,mBAAmB,CAAC,CAAC;IAC9G,IAAI,QAAQ,KAAK,UAAU;QAAE,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;;QACjG,MAAM,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAClF,CAAC"}

package/dist/src/config/configuration.d.ts

@@ -0,0 +1,40 @@
+import { type RecentReleaseHours, type TrustedPackageApproval } from "./types.js";
+import type { InteractiveMode } from "./interactive.js";
+export declare class ConfigError extends Error {
+    constructor(message: string);
+}
+export type ConfigSource = "default" | "global" | "project" | "environment" | "override";
+export interface ConfigInput {
+    readonly recentReleaseHours?: RecentReleaseHours;
+    readonly trustedPackages?: Readonly<Record<string, TrustedPackageApproval>>;
+}
+export interface EffectiveValue<T> {
+    readonly value: T;
+    readonly source: ConfigSource;
+}
+export interface EffectiveConfig {
+    readonly recentReleaseHours: EffectiveValue<RecentReleaseHours>;
+    readonly trustedPackages: EffectiveValue<Readonly<Record<string, TrustedPackageApproval>>>;
+    readonly allowRecent: EffectiveValue<readonly string[]>;
+}
+export declare function parseConfig(bytes: string, source: string): ConfigInput;
+export declare function loadConfigFile(path: string): Promise<ConfigInput | undefined>;
+export declare function composeConfig(options: {
+    readonly global?: ConfigInput;
+    readonly project?: ConfigInput;
+    readonly environment?: ConfigInput;
+    readonly overrides?: {
+        readonly allowRecent?: readonly string[];
+    };
+}): EffectiveConfig;
+export interface RecencySetupOptions {
+    readonly commandIsSecuritySensitive: boolean;
+    readonly existingConfiguration: boolean;
+    readonly mode: InteractiveMode;
+    readonly configPath: string;
+    readonly prompt?: () => Promise<string | undefined>;
+}
+export declare function selectRecencyConfiguration(options: RecencySetupOptions): Promise<{
+    readonly hours: RecentReleaseHours;
+    readonly source: "default" | "first-use";
+}>;

package/dist/src/config/configuration.js

@@ -0,0 +1,157 @@
+import { chmod, mkdir, readFile, rename, writeFile } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { randomUUID } from "node:crypto";
+import YAML from "yaml";
+import { defaultConfig, recentReleaseHours } from "./types.js";
+export class ConfigError extends Error {
+    constructor(message) {
+        super(`Configuration error: ${message}`);
+        this.name = "ConfigError";
+    }
+}
+const packageName = /^(?:@[^/@\s]+\/)?[A-Za-z0-9][A-Za-z0-9._-]*$/;
+const exactIdentity = /^(?:@[^/@\s]+\/)?[A-Za-z0-9][A-Za-z0-9._-]*@[0-9]+\.[0-9]+\.[0-9]+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+function object(value, source, key) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new ConfigError(`${source}: ${key} must be an object`);
+    }
+    return value;
+}
+function recentHours(value, source) {
+    if (typeof value !== "number" || !recentReleaseHours.includes(value)) {
+        throw new ConfigError(`${source}: recentReleaseHours must be one of 1, 6, 24`);
+    }
+    return value;
+}
+function approvals(value, source) {
+    const parsed = {};
+    for (const [name, approvalValue] of Object.entries(object(value, source, "trustedPackages"))) {
+        if (!packageName.test(name)) {
+            throw new ConfigError(`${source}: trustedPackages has invalid package name ${name}`);
+        }
+        const approval = object(approvalValue, source, `trustedPackages.${name}`);
+        if (typeof approval.version !== "string" || !/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/.test(approval.version)) {
+            throw new ConfigError(`${source}: trustedPackages.${name}.version must be an exact semantic version`);
+        }
+        if (typeof approval.integrity !== "string" || approval.integrity.length === 0) {
+            throw new ConfigError(`${source}: trustedPackages.${name}.integrity must be a non-empty string`);
+        }
+        const scripts = object(approval.scripts, source, `trustedPackages.${name}.scripts`);
+        const parsedScripts = {};
+        for (const [stage, scriptValue] of Object.entries(scripts)) {
+            const script = object(scriptValue, source, `trustedPackages.${name}.scripts.${stage}`);
+            if (typeof script.commandHash !== "string" || script.commandHash.length === 0 || typeof script.contentHash !== "string" || script.contentHash.length === 0) {
+                throw new ConfigError(`${source}: trustedPackages.${name}.scripts.${stage} requires non-empty commandHash and contentHash`);
+            }
+            parsedScripts[stage] = { commandHash: script.commandHash, contentHash: script.contentHash };
+        }
+        parsed[name] = { version: approval.version, integrity: approval.integrity, scripts: parsedScripts };
+    }
+    return parsed;
+}
+export function parseConfig(bytes, source) {
+    const document = YAML.parseDocument(bytes, { uniqueKeys: true, strict: true });
+    if (document.errors.length > 0) {
+        throw new ConfigError(`${source}: ${document.errors[0]?.message ?? "invalid YAML"}`);
+    }
+    const value = document.toJS();
+    if (value === null || value === undefined) {
+        return {};
+    }
+    const parsed = object(value, source, "root");
+    const allowed = new Set(["recentReleaseHours", "trustedPackages"]);
+    for (const key of Object.keys(parsed)) {
+        if (!allowed.has(key)) {
+            throw new ConfigError(`${source}: unknown security-sensitive key ${key}`);
+        }
+    }
+    return {
+        ...(parsed.recentReleaseHours === undefined ? {} : { recentReleaseHours: recentHours(parsed.recentReleaseHours, source) }),
+        ...(parsed.trustedPackages === undefined ? {} : { trustedPackages: approvals(parsed.trustedPackages, source) }),
+    };
+}
+export async function loadConfigFile(path) {
+    try {
+        return parseConfig(await readFile(path, "utf8"), path);
+    }
+    catch (error) {
+        if (error.code === "ENOENT") {
+            return undefined;
+        }
+        throw error;
+    }
+}
+function sourceFor(input, source) {
+    return input?.recentReleaseHours === undefined ? "default" : source;
+}
+function validateExactOverrides(values) {
+    for (const value of values) {
+        if (!exactIdentity.test(value)) {
+            throw new ConfigError(`one-shot override must be an exact name@version identity: ${value}`);
+        }
+    }
+    return [...values];
+}
+export function composeConfig(options) {
+    const globalHours = options.global?.recentReleaseHours ?? defaultConfig.recentReleaseHours;
+    const projectHours = options.project?.recentReleaseHours;
+    if (projectHours !== undefined && projectHours < globalHours) {
+        throw new ConfigError("project recentReleaseHours cannot weaken global policy");
+    }
+    const projectEffective = projectHours ?? globalHours;
+    const environmentHours = options.environment?.recentReleaseHours;
+    if (environmentHours !== undefined && environmentHours < projectEffective) {
+        throw new ConfigError("environment recentReleaseHours cannot weaken effective policy");
+    }
+    const effectiveHours = environmentHours ?? projectEffective;
+    const trusted = { ...(options.global?.trustedPackages ?? {}), ...(options.project?.trustedPackages ?? {}) };
+    return {
+        recentReleaseHours: {
+            value: effectiveHours,
+            source: environmentHours !== undefined
+                ? "environment"
+                : projectHours !== undefined
+                    ? "project"
+                    : sourceFor(options.global, "global"),
+        },
+        trustedPackages: {
+            value: trusted,
+            source: options.project?.trustedPackages === undefined ? (options.global?.trustedPackages === undefined ? "default" : "global") : "project",
+        },
+        allowRecent: {
+            value: validateExactOverrides(options.overrides?.allowRecent ?? []),
+            source: options.overrides?.allowRecent === undefined ? "default" : "override",
+        },
+    };
+}
+async function saveRecencyConfiguration(path, hours) {
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    const temporary = join(dirname(path), `.${randomUUID()}.tmp`);
+    try {
+        await writeFile(temporary, `recentReleaseHours: ${hours}\n`, { encoding: "utf8", mode: 0o600, flag: "wx" });
+        await chmod(temporary, 0o600);
+        await rename(temporary, path);
+        await chmod(path, 0o600);
+    }
+    finally {
+        await import("node:fs/promises").then(({ rm }) => rm(temporary, { force: true }));
+    }
+}
+export async function selectRecencyConfiguration(options) {
+    if (!options.commandIsSecuritySensitive || options.existingConfiguration || !options.mode.interactive || options.prompt === undefined) {
+        return { hours: 1, source: "default" };
+    }
+    for (let attempts = 0; attempts < 3; attempts += 1) {
+        const response = await options.prompt();
+        if (response === undefined) {
+            return { hours: 1, source: "default" };
+        }
+        if (response === "1" || response === "6" || response === "24") {
+            const hours = Number(response);
+            await saveRecencyConfiguration(options.configPath, hours);
+            return { hours, source: "first-use" };
+        }
+    }
+    return { hours: 1, source: "default" };
+}
+//# sourceMappingURL=configuration.js.map

package/dist/src/config/configuration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration.js","sourceRoot":"","sources":["../../../src/config/configuration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAyE,MAAM,YAAY,CAAC;AAGtI,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAoBD,MAAM,WAAW,GAAG,8CAA8C,CAAC;AACnE,MAAM,aAAa,GAAG,8GAA8G,CAAC;AAErI,SAAS,MAAM,CAAC,KAAc,EAAE,MAAc,EAAE,GAAW;IACzD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,KAAK,GAAG,oBAAoB,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,MAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,KAA2B,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,8CAA8C,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAA2B,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,MAAc;IAC/C,MAAM,MAAM,GAA2C,EAAE,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC,EAAE,CAAC;QAC7F,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,8CAA8C,IAAI,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,0DAA0D,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/H,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,qBAAqB,IAAI,4CAA4C,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,qBAAqB,IAAI,uCAAuC,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,mBAAmB,IAAI,UAAU,CAAC,CAAC;QACpF,MAAM,aAAa,GAAiE,EAAE,CAAC;QACvF,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,mBAAmB,IAAI,YAAY,KAAK,EAAE,CAAC,CAAC;YACvF,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3J,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,qBAAqB,IAAI,YAAY,KAAK,iDAAiD,CAAC,CAAC;YAC9H,CAAC;YACD,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;QAC9F,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACtG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,MAAc;IACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/E,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,cAAc,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACnE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CAAC,GAAG,MAAM,oCAAoC,GAAG,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAE,CAAC;QAC1H,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC;KAChH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY;IAC/C,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAA8B,EAAE,MAAoB;IACrE,OAAO,KAAK,EAAE,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AACtE,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAyB;IACvD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,WAAW,CAAC,6DAA6D,KAAK,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAK7B;IACC,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,kBAAkB,IAAI,aAAa,CAAC,kBAAkB,CAAC;IAC3F,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACzD,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,GAAG,WAAW,EAAE,CAAC;QAC7D,MAAM,IAAI,WAAW,CAAC,wDAAwD,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,gBAAgB,GAAG,YAAY,IAAI,WAAW,CAAC;IACrD,MAAM,gBAAgB,GAAG,OAAO,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACjE,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,GAAG,gBAAgB,EAAE,CAAC;QAC1E,MAAM,IAAI,WAAW,CAAC,+DAA+D,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,cAAc,GAAG,gBAAgB,IAAI,gBAAgB,CAAC;IAC5D,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5G,OAAO;QACL,kBAAkB,EAAE;YAClB,KAAK,EAAE,cAAc;YACrB,MAAM,EACJ,gBAAgB,KAAK,SAAS;gBAC5B,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,YAAY,KAAK,SAAS;oBAC1B,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;SAC5C;QACD,eAAe,EAAE;YACf,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SAC5I;QACD,WAAW,EAAE;YACX,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,IAAI,EAAE,CAAC;YACnE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;SAC9E;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IAAY,EAAE,KAAyB;IAC7E,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,uBAAuB,KAAK,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5G,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAUD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAA4B;IAC3E,IAAI,CAAC,OAAO,CAAC,0BAA0B,IAAI,OAAO,CAAC,qBAAqB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtI,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;IACD,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,EAAE,QAAQ,IAAI,CAAC,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACzC,CAAC;QACD,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAuB,CAAC;YACrD,MAAM,wBAAwB,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACzC,CAAC"}

package/dist/src/config/interactive.d.ts

@@ -0,0 +1,16 @@
+export type NonInteractiveReason = "json" | "ci" | "stdin-not-tty" | "stderr-not-tty" | "prompt-unavailable";
+export type InteractiveMode = {
+    readonly interactive: true;
+    readonly reason: "terminal";
+} | {
+    readonly interactive: false;
+    readonly reason: NonInteractiveReason;
+};
+export interface InteractiveDetectionOptions {
+    readonly json: boolean;
+    readonly environment: Readonly<Record<string, string | undefined>>;
+    readonly stdinIsTTY: boolean | undefined;
+    readonly stderrIsTTY: boolean | undefined;
+    readonly promptAvailable: boolean;
+}
+export declare function detectInteractiveMode(options: InteractiveDetectionOptions): InteractiveMode;

package/dist/src/config/interactive.js

@@ -0,0 +1,19 @@
+export function detectInteractiveMode(options) {
+    if (options.json) {
+        return { interactive: false, reason: "json" };
+    }
+    if (options.environment.CI !== undefined && options.environment.CI !== "" && options.environment.CI !== "0") {
+        return { interactive: false, reason: "ci" };
+    }
+    if (options.stdinIsTTY !== true) {
+        return { interactive: false, reason: "stdin-not-tty" };
+    }
+    if (options.stderrIsTTY !== true) {
+        return { interactive: false, reason: "stderr-not-tty" };
+    }
+    if (!options.promptAvailable) {
+        return { interactive: false, reason: "prompt-unavailable" };
+    }
+    return { interactive: true, reason: "terminal" };
+}
+//# sourceMappingURL=interactive.js.map

package/dist/src/config/interactive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interactive.js","sourceRoot":"","sources":["../../../src/config/interactive.ts"],"names":[],"mappings":"AAcA,MAAM,UAAU,qBAAqB,CAAC,OAAoC;IACxE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC;QAC5G,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACjC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAC7B,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACnD,CAAC"}

package/dist/src/config/paths.d.ts

@@ -0,0 +1,22 @@
+export interface PathEnvironment {
+    readonly home?: string;
+    readonly cwd?: string;
+    readonly temp?: string;
+    readonly environment?: Readonly<Record<string, string | undefined>>;
+    readonly platform?: NodeJS.Platform;
+}
+export interface BnpmPaths {
+    readonly globalConfig: string;
+    readonly userNpmrc: string;
+    readonly store: string;
+    readonly cache: string;
+    readonly quarantine: string;
+    readonly projectConfig: string;
+    readonly projectNpmrc: string;
+    readonly lockfile: string;
+    readonly virtualStore: string;
+    readonly ephemeralRoot: string;
+    readonly globalRoot: string;
+    readonly globalBin: string;
+}
+export declare function createBnpmPaths(options?: PathEnvironment): BnpmPaths;

package/dist/src/config/paths.js

@@ -0,0 +1,46 @@
+import { join } from "node:path";
+function required(value, name) {
+    if (!value) {
+        throw new Error(`${name} is required to resolve bnpm paths`);
+    }
+    return value;
+}
+export function createBnpmPaths(options = {}) {
+    const environment = options.environment ?? process.env;
+    const home = options.home ?? environment.HOME;
+    const cwd = options.cwd ?? process.cwd();
+    const temp = options.temp ?? environment.TMPDIR ?? environment.TEMP ?? "/tmp";
+    const platform = options.platform ?? process.platform;
+    const configHome = environment.BNPM_CONFIG_HOME ??
+        (platform === "darwin"
+            ? join(required(home, "HOME"), "Library", "Application Support", "bnpm")
+            : platform === "win32"
+                ? join(environment.APPDATA ?? join(required(home, "HOME"), "AppData", "Roaming"), "bnpm")
+                : join(required(home, "HOME"), ".config", "bnpm"));
+    const cacheHome = environment.BNPM_CACHE_HOME ??
+        (platform === "darwin"
+            ? join(required(home, "HOME"), "Library", "Caches", "bnpm")
+            : platform === "win32"
+                ? join(environment.LOCALAPPDATA ?? join(required(home, "HOME"), "AppData", "Local"), "bnpm")
+                : join(required(home, "HOME"), ".cache", "bnpm"));
+    const globalRoot = environment.BNPM_GLOBAL_HOME ?? (platform === "darwin"
+        ? join(required(home, "HOME"), "Library", "Application Support", "bnpm", "global")
+        : platform === "win32"
+            ? join(environment.LOCALAPPDATA ?? join(required(home, "HOME"), "AppData", "Local"), "bnpm", "global")
+            : join(environment.XDG_DATA_HOME ?? join(required(home, "HOME"), ".local", "share"), "bnpm", "global"));
+    return {
+        globalConfig: join(configHome, "config.yaml"),
+        userNpmrc: environment.NPM_CONFIG_USERCONFIG ?? join(required(home, "HOME"), ".npmrc"),
+        store: join(cacheHome, "store"),
+        cache: join(cacheHome, "cache"),
+        quarantine: join(cacheHome, "quarantine"),
+        projectConfig: join(cwd, "bnpm.yaml"),
+        projectNpmrc: join(cwd, ".npmrc"),
+        lockfile: join(cwd, "bnpm-lock.yaml"),
+        virtualStore: join(cwd, "node_modules", ".bnpm"),
+        ephemeralRoot: join(temp, "bnpmx"),
+        globalRoot,
+        globalBin: join(globalRoot, "bin"),
+    };
+}
+//# sourceMappingURL=paths.js.map

package/dist/src/config/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/config/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAyBjC,SAAS,QAAQ,CAAC,KAAyB,EAAE,IAAY;IACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAO,GAAoB,EAAE;IAC3D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,IAAI,MAAM,CAAC;IAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,UAAU,GACd,WAAW,CAAC,gBAAgB;QAC5B,CAAC,QAAQ,KAAK,QAAQ;YACpB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,CAAC;YACxE,CAAC,CAAC,QAAQ,KAAK,OAAO;gBACpB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC;gBAC3F,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,MAAM,SAAS,GACb,WAAW,CAAC,eAAe;QAC3B,CAAC,QAAQ,KAAK,QAAQ;YACpB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC3D,CAAC,CAAC,QAAQ,KAAK,OAAO;gBACpB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC;gBAC9F,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,WAAW,CAAC,gBAAgB,IAAI,CAAC,QAAQ,KAAK,QAAQ;QACvE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,EAAE,QAAQ,CAAC;QAClF,CAAC,CAAC,QAAQ,KAAK,OAAO;YACpB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC;YACtG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5G,OAAO;QACL,YAAY,EAAE,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC;QAC7C,SAAS,EAAE,WAAW,CAAC,qBAAqB,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC;QACtF,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;QAC/B,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;QAC/B,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QACzC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC;QACrC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC;QACjC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC;QACrC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC;QAChD,aAAa,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QAClC,UAAU;QACV,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC;KACnC,CAAC;AACJ,CAAC"}

package/dist/src/config/types.d.ts

@@ -0,0 +1,15 @@
+export declare const recentReleaseHours: readonly [1, 6, 24];
+export type RecentReleaseHours = (typeof recentReleaseHours)[number];
+export interface BnpmConfig {
+    recentReleaseHours: RecentReleaseHours;
+    trustedPackages: Readonly<Record<string, TrustedPackageApproval>>;
+}
+export interface TrustedPackageApproval {
+    version: string;
+    integrity: string;
+    scripts: Readonly<Record<string, {
+        commandHash: string;
+        contentHash: string;
+    }>>;
+}
+export declare const defaultConfig: BnpmConfig;

package/dist/src/config/types.js

@@ -0,0 +1,6 @@
+export const recentReleaseHours = [1, 6, 24];
+export const defaultConfig = {
+    recentReleaseHours: 1,
+    trustedPackages: {},
+};
+//# sourceMappingURL=types.js.map

package/dist/src/config/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/config/types.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAU,CAAC;AActD,MAAM,CAAC,MAAM,aAAa,GAAe;IACvC,kBAAkB,EAAE,CAAC;IACrB,eAAe,EAAE,EAAE;CACpB,CAAC"}